USN-7848-1: AMD Microcode vulnerabilities

Q: What level of access would an attacker need to exploit this issue?

The issue is described as locally exploitable. An attacker would need local access to the affected system.

Published Oct 29, 2025

Updated

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores. A local attacker could possibly use this issue to expose sensitive information. This update provides the updated microcode mitigations required for the corresponding Linux kernel update.

Affected Software

2 affected componentsFixes available

All of the following

ubuntu/amd64-microcode<3.20250708.0ubuntu0.25.04.2

3.20250708.0ubuntu0.25.04.2

Ubuntu Ubuntu=25.04

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/amd64-microcode to a version that resolves this vulnerability.
Fixed in 3.20250708.0ubuntu0.25.04.2
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-7848-1

Event History

Oct 29, 2025

Advisory Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

What level of access would an attacker need to exploit this issue?

The issue is described as locally exploitable. An attacker would need local access to the affected system.

Why is a Linux kernel update relevant to this microcode update?

This update provides the updated microcode mitigations required for the corresponding Linux kernel update.